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10 BIOMETRT P CERTTRTPa TPQ 

BACKGROTT ND pp Tp g INVRMTTnw 

1 - FIELD OP THE TWVR| aTTn^ 

This disclosure relates generally to the field of secure 
communications, and in particular to the issuance and 
15 management of certificates for authenticating messages. 

2 " DESCRIPTI ON OP ROTATED ART 

The use of computer networks and telecommunication systems 
for various transactions has markedly increased in recent 

20 years. Traditional transactions such as shopping, purchasing, 
banking, and investment services have experienced growth in new 
directions due to the application of computers and 
telecommunications . 

While traditional transactions have heretofore been 

25 conducted typically on a person -to-per son basis, many 

telecommunication-based transactions are conducted remotely and 
sight-unseen; i.e. the participants in telecommunication-based 
transactions may never meet. 

With such telecommunication-based transactions, there is 
an increasing need to recognize and verify the authenticity of 
a remote user of electronic services, including such services 
xnvolvxng consumers of all types of electronic transactions 
such as purchases over the Internet, home banking, electronic 
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transfers of funds, and electronic brokerage services. Such 
electronic transactions may also involve users of remote 
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repositories of data, for example, to access classified 
records, medical records, billing records, and unclassified but 
sensitive data, such as company records. Other relevant areas 
requiring adequate or even absolute security include 
5 authentication of signers of electronic documents such as 
contracts. In general, any electronic service of value, 
provided over a local network or a public network, requires 
authentication of the requester in order to protect the value 
of the service. More valuable services typically require a 
10 greater degree of authentication. 

Historically, access to electronic services has been 
provided through identification techniques such as account 
names and authentication techniques such as personal 
identification numbers (PINs) and passwords. Such 
15 authentication techniques have not proven to be very secure 
since PINs and passwords are often easily guessed, hard to 
remember, or subject to discovery by exhaustive automated 
searches. Recently, digital certificates have emerged as a 
leading candidate for authenticating electronic transactions . 
20 Ideally, a digital certificate, such as those defined by 

the X.509 and ANSI X.9 standards, allows users or buyers and 
sellers to authenticate electronic documents and electronic 
transactions in a manner analogous to the authentication of 
documents by a Notary Public in person-to-person transactions. 
25 The combination of cryptographic techniques, including public 
key cryptography, and the use of digital certificates provides 
greater integrity, privacy and a degree of authentication for 
on-line electronic transactions which instills a greater level 
of confidence in the electronic services consumer. 
30 For example, such authenticating certificates in the prior 

art may be generated by concatenating a message and a public 
key with a set 10 of data as shown in FIG. 1, which may be in a 
sequence and which may include a subject unique ID 12 
corresponding to the subject; that is, the individual or entity 
35 such as a corporation, having the public key. As shown in FIG. 
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IT"" " eldS " l ° °* d3ta -» incl <"* - version 

number, a serial number for the certificate with respect to a 
sequence of generated certificates, the name of the issuer a 
validity period to determine a„ expiration of validi y 7tZ 
S certificate, a subject name identifying the user or individual 
sending the transaction, a issuer unique n> number, and other 

cercm!™ r* 0 " 1 " 9 PriV " e9eS a " rib — - ^ 
certificate, such as access privileges. 

The subject unique ID 12 of the user may include M bit„ 
- representing, for example, a social security number or a 
P^swor^associated with the user sending the transaction. 

M ~ 50 bits - 6 bytes or less. 

The authenticating certificate h«i™ 

data xs then processed, for example, using a hash function 
The „, h 7 n T y aSWn9 fUnC "° n ' C ° 9 ™« * "ashed value 

^ixvace Key of the user to aenerat-t* » r^~,-«- i 
on ™_ . yenerace a digital signature 14 

ertxfacate and the message, such as an electronic transaction 
for transmxssion over, for example, a network. nsactlon ' 

The X.509 and ANSI x. 9 standards described above 
-corporate a hash function to generate unique digital 
25 signatures 14 from a respective set 10 of data Such 

hashing functions enable the transaction data to T " 
computationally infeasible to derive solely from the hash 
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While the use in the prior art of authenticating 

tracer" 3 ^T™" 9 certificates improves 

transactions employing electronic authentication, it still 
falls short of actually authenticating a human transactor such 
as a consume,. In3tead . ^ a cerct£lcatee 

trLacc ^ PriVaCe Key used in the 

transaction or signature. Since private keys are physically 
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stored on computers and/or electronic storage devices, such 
private keys are not physically related to the entities 
associated with the private keys. For example, a private key 
is assigned to an entity, which may be a group of people, an 

5 organization such as a company, or even groups of 

organizations, and so private keys are not limited to actual 
human individuals. 

Identification indica of individuals may be subdivided 
into three broad categories : indica based on the physical 

10 characteristics of the individual, that is, what the individual 
is; indicia based on one's knowledge, such as passwords known 
to the individual; and indicia based on assigned information, 
that is, what another individual has associated with the 
identified individual, or what the identified individual 

15 chooses with which to be associated. The first category having 
physical indicia relates to the biometric data of an 
individual, and includes characteristic features such as 
genetic composition, fingerprints, hand geometry, iris and 
retinal appearance, etc., which are unique to each individual, 

20 with known exceptions such as the identical genetic 
compositions of twins. 

The second and third categories having known and/or 
assigned indicia includes information which the individual 
knows and/or is charged with memorizing and divulging for 

25 authentication, such as social security number, mother's maiden 
name, access codes such as long distance calling card numbers, 
and personal passwords. The second category also includes 
information and/or objects which the individual owns and/or is 
charged with carrying and divulging for authentication, such as 

30 driver's licenses and passports. 

Private keys are assigned indicia. Accordingly, the lack 
of physical identification of a human transactor with a private 
key is a flaw in authentication techniques in the prior art 
using such private keys. Other authentication and security 

35 techniques in the prior art are similarly flawed, since many 
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authentication and sernr^v 

indicia of th. S ^ CUrit y techniques rely on identification 

mcucia of the second category. 

indi h ? 1,UeS ^ teOWn In the a " £or authenticating an 
individual based on identification indica of the first 

uT'LTentT ^ ^ PhVSiCal Cha -««^«cs. Por exa-npie. 
t e identification indicia for such physicai bar^stcs 

classi'ticatHnTtT T ^ bi ° metri ° id ™"»«"°n and 

p-des ;r^~.::r ic t — 

25 herein ^J^"*" ±C " tl °" ^ "* ^ ~* ««««»— 
bild I "P 1 "—*. an end-to-end security mechanis. 

cert fLates ^e tr b C <* — digi tal 

.ect i /trance 

30 ss^s or::: :r :r- - a ° £ ~» 

-.trie data reiated r^ST^T^T.^ 
Blo^etrrc data is pre-stored as Metric certificates in 
a brometrrc database of the biometric certificate 
system by receiving data corresponding to Pnysics, ^ 
3S characteristics of registered users through , "Iltric input 
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device. Subsequent transactions to be conducted over a network 
have transaction biometric data generated from the physical 
characteristics of a current user, which is then appended to 
the transaction first data, and which then authenticates the 
5 user by comparison against the pre-stored biometric data of the 
physical characteristics of users in the biometric database. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The features of the disclosed biometric certification 
10 system and method are readily apparent and are to be understood 
by referring to the following detailed description of the 
preferred embodiments of the present invention, taken in 
conjunction with the accompanying drawings, in which: 

FIG. 1 illustrates an authenticating certificate in the 
15 prior art; 

FIG. 2 illustrates a biometric certificate of the 
disclosed biometric certification system and method; 

FIG. 3 illustrates a biometric certificate registration 
apparatus; 

20 FIG. 4 illustrates an electronic transaction transmission 

section; and 

FIG. 5 illustrates an electronic transaction reception and 
processing section. 

25 DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Referring in specific detail to the drawings, with common 
reference numbers identifying similar or identical elements, 
steps, and features, as shown in FIG. 2 the present disclosure 
describes a biometric certification system and method for 

30 generating biometric certificates from a set 16 of data, 
including a subject unique ID 18 and biometric data 20. A 
digital signature 22 generated using data set 16 is then 
appended to the data set 16 to form the biometric certificate, 
as shown in FIG. 2. 

35 The disclosed biometric certification system is shown in 
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PIGS having biometric registration section 24 shown in 

FIG. 3, a transmitting section 40 shown in FIG. 4 and a 
receiving section 42 shown in FIG. 5. The biometric 
registration section 24 processes user biometrics and 
5 associated inputs to generate biometric certificates which are 
unique to the user, and which are stored in a memory such as a 
biometric database and/or a smart card memory. Once such 
biometric certificates are stored, a first user may conduct 
bxometrically-secured electronic transactions sent from the 
10 transaction transmission section 40 of FIG. 4 to the 

transaction reception section 42 of FIG. 5, at which the 
electronic transaction is authenticated and processed 

Referring to FIG. 3, the registration section 24 has a set 
of input devices, including a registration biometric input 
15 device 26 and a user data input device 28. The biometric input 
device 26 generates registration biometric data from the 
Physical characteristics of the user, such as fingerprints, 
hand geometry, iris and retinal appearance, and speech 
patterns . 

20 The registration biometric input device 26 may include 

visual cameras and/or other visual readers to input 
fingerprints, hand geometry, iris appearance, and retinal 
appearance. For example, companies such as IDENTIX, FUJITSU 
andAUTHENTEC provide such equipment for reading fingerprints 

25 while RECOGNITION SYSTEMS provides equipment to read hZd 
geometry. EYE - DENTI FY is an example of a company which 

exZl! 8 T inal ima9in9 d6ViCeS ' IRISCAN -d SENSAR are 

examples of companies which provide iris imaging devices 

Alternatively, the registration biometric input device 26 

30 may be adapted to receive audio characteristics of a uZr For 

example, a microphone in conjunction with a speech digitizer 

Bbn " T iVe - ^- sPeech. Such 

BBN, T-NETIX, and ALPHA- TEL provide such equipment for 

35 b~c 9 ra^"^ 9 3PeeCh ^ ™ —ding 
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Biometric input devices known in the art may be used to 
receive other physical characteristics such as facial and body 
appearance via # for example, a camera, as well as the genetic 
composition of the user by means of genetic material gathering 
5 procedures, such as blood lancets. 

The biometric certificate as shown in FIG. 2 may be 
generated by processing the registration biometric data from 
the registration biometric input device 26, processing the user 
input data such ais a user ID from the user data input device 

10 28, and processing the public key 30 of the user at a biometric 
certificate generator 32 of a registration authority 34. Such 
input data are processed with the private key 36 of a 
certifying authority to generate a digital biometric 
certificate 38 which is sent to the memory for storage and 

15 subsequent use to authenticate the first user and associated 
electronic transactions of the first user. 

The registration biometric data 20 to be incorporated into 
the biometric certificate of FIG. 2 is obtained directly from 
the physical characteristics of the subject through the 

20 biometric input device 26. The subject unique ID 18 of the 
user may include M bits, in which typically M ~ 50 bits ~ 6 
bytes or less, while the biometric data 20 typically includes 
much more data than the subject unique ID 18. Generally, the 
biometric data 20 has N bits in which N may be very large, such 

25 as about 500 bytes. In fact, the amount of the biometric data 
20 is unlimited; for example, a fingerprint may be visually 
scanned to any resolution to obtain key fingerprint aspects 
which uniquely distinguish fingerprints, or alternatively to 
obtain data representing pixels of the entire fingerprint. 

30 Accordingly, the biometric data 20 may require large amounts of 
memory for storage such as 2 kB or even 4 MB. Accordingly, in 
the preferred embodiment, N is much greater than M. 

Prior to use of the disclosed biometric certification 
system and method, the biometric database 66 is built using, 

35 for example, a registration process in which individuals are 
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required to provide proof of identity, that is. identification 
information such as a birth certificate, a driver's license 
current ban* account data, credit card account data, etc. to be 
provided to a registration authority, once the registration 
5 authorrty is satisfied with such proof, the identification 
^formation is entered into the registration system 24 and 
biometrrc measurements are then taken concurrently using at 
least one biometric input device 26, as shown in fig 3 
_ Such stored biometric measurements form the pre-stored 

TZT C datain the bio " etric dacabMe « -** 

to the pre-regxstered individuals who have undergone the 
registration process described above. Accordingly, pre- 
regxstered individuals may be properly authenticated while 

15 zz:::r individuaia ~ — *• «~. ~ 

The biometric certif ic'at-oa a*.-. 

eitnicaces 38 are then sent to be stored 

"77' SUCh - * ric database or a memory of 1 

smart card, as shown as the memory 66 in FIG. 5 The 
registration system 24 of FIG. 3 may be located at a central 
20 regxstration station associated with a network, such that the 
a C :~ 9 ic certificates of a user may be d^ectly 

and securely stored in the memory 66, such as a central 
bxometric database of a network or an individual memory of a 

25 d^bas ^ USer ' Accordingly , the central biomltr c 
25 database as the memory 66 may serve a network of users 
conducting transactions, such as electronic commerce ( E - 
commerce) , over the Internet and other networks 
Alternatively, a smart card of the first user having the memorv 
66 may pre-store the biometric certificates, such that l±Z2 
30 and other devices such as terminals and automatic teller 

machines (ATMs) may access the memory 66 and obtain the secured 
bxometric certificate of the first user. n ^he secured 

Referring to FIGS. 4-5, to conduct an electronic 

35 irT";:; f t st first user uses the transaction — - *» 

The fxrst user uses a transaction biometric input 
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device 44 to generate transaction biometric data 46 as 
contemporaneous biometrics associate with the first user. The 
first user also generates transaction first data 50 through a 
transaction data input device 48. For example, the transaction 
5 first data 50 may include selections of products to be 

purchased over the Internet, or may include electronic funds 
transfers through an ATM. The transaction first data 50 also 
includes user ID data identifying the first user and 
associating the first user with the remainder of the 

10 transaction first data. 

Both of the transaction biometric data 46 and the 
transaction first data 50 are sent over the network 60 
unchanged and in the clear, or optionally encrypted by 
additional encryption techniques known in the art, to be 

15 received by the transaction reception section 42, as shown in 
FIG. 5. 

In addition, at the transaction transmission section 40 of 
FIG. 4, both of the transaction biometric data 46 and the 
transaction first data 50 are processed, for example, using a 

20 first hash function 52, such as a one-way hashing function, to 
generate a first hashed value. RSA and SHA-1 are examples of 
public key cryptographic methods and one-way hashing which may 
be used for such encryption and hashing functions. The RSA 
method is described, for example, in U.S. Patent No. 4,405,829 

25 to Rivest et al., which is incorporated herein by reference. 
The SHA-1 method is described, for example, in U.S. Patent No. 
5,623,545 to Chi Ids et al., which is incorporated herein by 
reference. 

The first hashed value is then sent to a digital signature 
30 function 54, in which the hashed value is signed; that is, 
encrypted, using the private key 56 of the first user to 
generate a digital signature 58, incorporating the first hash 
value. The digital signature 58 is then sent to the network 
60. 

35 The set of data transmissions constituting the transaction 
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biometric data 46, the transaction first data 50, and the 
dxgxtal signature 58 may be sent as separate bitstreams and/or 
data packets, or otherwise may be sent together by appending 

5 ada a33 f ° C T d SeqUenCeS USing 9 C ° nCa tenat ~< -ch as an 

S adder for bxtwise adding of the data sequences. In addition 
software may be used to append such data. The data 46, 50, and 
58 may be sent to the network 60, which may include telephone 
networks, satellite communications, and/or the Internet 

Referring to FIG. 5, after receiving the electronic 
transaction from the network 60, the receiving section 42 sends 
the user ID data 62 from the transaction first data 50 to be 
sent to a biometric certificate extractor 54. The biometric 
certxfxcate extractor 54 uses the user ID data 62 to access a 
correspondxng biometric certificate stored in the memory 66 
IS such as the biometric database or smart card memory. T Tat is, 

ol i ica^s PreVi ° USly 8t ° red corresponding 

certxfxcates generated from biometric characteristics of the 
fxrst user using the registration system 24 shown in fig 3 

20 accordxng to the user ID data, such as the social security 
number, of the first user. 

The memory 66 may receive the user ID data 62 or 

ZlZtll : 4 ay t reCeiVe 3 C ™ *™ th. biometrie'eertificate 
extractor 64 to retrieve any biometric certificate 

25 corresponding to the user ID data 62 of the first user if 
none are available, the receiving section 42 may generate a 
rejection sxgnal, for example, at the biometric certificate 
avtu^u/ 4 ' ^ indiCatS "° bi ° metric certificate is 

JO Accordingly, any user requesting authentication of an 

electronic transaction but failing to be registered; that is 
to have a corresponding pre-stored biometric certificate stored 
T ^ ±S ^ auth -"-ted. The receiving section 

■5 and l y v 9 T ate * °°""*»^ «~ •*> of non-authentication 
and may also send such a message through the network 60 to the 
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transmitting section 40 to indicate no authenticity in the 
transaction. 

Otherwise, if a biometric certificate is available for the 
first user having corresponding user ID data, the biometric 
5 certificate 68 is retrieved and sent to the biometric 

certificate extractor 64 to decrypt the biometric certificate 
68 using the public key 70 of the certifying authority. Thus, 
the biometric certificate extractor 64 obtain the decrypted 
registration biometric data 72 and the decrypted user public 

10 key 74 associated with the first user. 

The decrypted user public key 74 is then sent to a 
decryptor to decrypt the digital signature 58 sent over the 
network 60 from the transmitting section 24. The decryptor 76 
then extracts the first hash value which was incorporated into 

15 the digital signature 58 by the first hash function 52. 

The receiving section 24 authenticates the first hash 
value by attempting to recreate the first hash value using a 
second hash function 78 which is identical to the first hash 
function 52 of the transmitting section 24. The second hash 

20 function 78 receives the transaction biometric data 46 and the 
transaction first data 50 from the network 60, which were sent 
from the transmitting section 24 in the clear, or optionally 
encrypted by additional encryption techniques known in the art. 
The second hash function 78 thus generates a second hash value 

25 from the same input data applied to the first hash function 52. 
The first and second hash values are then compared by a 
first classifier 80, such as a comparator or matching routines 
in software, for determining a match between the first and 
second hash values. A first validation signal 82 is generated 

30 to indicate whether or not both independently generated hash 
values match. 

If both match, then the receiving section 42 thus 
determines that both of the transaction biometric data 46 and 
the transaction first data 50, in combination, are authentic 

35 and have not been modified during transmission over the network 
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60. 



in addition, the receiving section 42 determines whether 
the electrons transaction is indeed from the indicated user 
corresponding to the transaction biometric data 46; that is 
5 transaction biometric. data 46 may not be authentic, or ' 
alternatively, the decrypted user public key 74 may be a public 

k6 V 4 COmm0nly Shared by a ***** group of people such as 
employees of a specific company. 

Accordingly, the receiving section 42 compares the 
10 biometric data of the first user generated during the 

transaction, as the transaction biometric data 46, with the 

IITTT* b±0metriC data 9eneratSd at - earli - -t. from 
the first user during a registration process using the 

registration system 24. The registration biometric data which 
IS -decrypted by the biometric certificate extractor 64 to be 
the decrypted registration biometric data 72, is applied to a 
second classifier 84 to be compared to the transactln 

cZTZ 46 i ; hiCh ^ SSnt ^ ^ 60 in ^e 

20 ^ h ° Ptl ° nall y e -rypted by additional encryption 

20 techniques known in the art. 

■ _ The second classifier 84 may be a comparator, or 
alternatively a software routine or other hardware/software 
dev. pl g data mMbipg techniques> for / com ^ 

2s " :::::t:v s t^: :: tain : decision vaiue - 

classifier 84 may be a trained neural network and/„v 
a fu„y logic classi£ier £or classifying whet o 

an error tolerance, the sets of biometric data 48. T 2 w re 
obtained fro™ the same individual using biometric input 

30 il e C s e8 a„d S dta ClaS3i£1Cati0n ™ eth ° dS £ ° r a «"-"-ion of 
images and data sequences using neural networks are described 
for example, in U.S. Patent No. 5 .6 19 . 62 „ to Eccles ,1^' 
incorporated herein by reference. " 

form IT TCCOnd ClaSSi£i « 64 che » generates a decision in the 
35 IT Se ° 0nd " alida "°» ^9nal 86. which may be logic 

values corresponding to yes or „. or TRUE or pLb. Seating 
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verification of the authenticity of the user sending the 
electronic transaction. Alternatively, the authentication 
decision may be a numerical value , for example, corresponding 
to a percentage of confidence of authenticity. The second 
5 classifier 86 may include a predetermined threshold of, for 
example, 98% authenticity, to be exceeded in order to proceed 
with the processing of the electronic transaction. 

The receiving section 42 shown in FIG. 5 may respond to 
the validation signals 82, 86 to process the transaction first 

10 data 50, such as an on-line purchase or an electronic funds 
transfer. Accordingly, transaction processing systems (not 
shown) may also be included in the receiving section 42. 
Alternatively, the receiving section 42 of FIG. 5 may be 
coupled to external transaction processing systems. 

15 In another alternative embodiment, the receiving section 

may include an AND circuit 88 shown in FIG. 5, such as a logic 
AND gate or other logic mechanisms, for generating a final 
validation signal 90 from the validation signals 82, 86. 
Accordingly, if and only if both of the classifiers 80, 84 

20 determine that the transaction biometric data 46 as well as the 
transaction first data 50 have been sufficiently securely 
transmitted over the network 60, then a final validation signal 
90 reflecting the security of the overall transaction is 
generated. 

25 Although the first classifier 80 is a perfect classifier; 

that is, only an exact match of the hash values generates an 
authentication, the second classifier 84 may generate 
percentages reflecting relative authenticity and/or scaled 
numerical values on an authenticity scale to reflect the error 

30 tolerance of the second classifier 84 and/or the cross-over 
error rates associated with biometrics. Accordingly , the 
application of fuzzy logic may be used to generate a crisp 
determination of the authenticity of the transaction biometric 
data 46 as the second validation signal 86. 

35 Using biometric certificates, cross-over error rates for 
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15 



20 



25 



identification and authentication may be below about 2.0% and 
may even be also low as about 0.5%. The application of more 
advanced biometric input devices 26, 44 and classifiers 80 84 
known in the art may obtain substantially perfect 
authentication of any individual from the global population 

The disclosed biometric certification system and method 
may include electronic transactions using a network as 
described in commonly assigned U.S. Patent Application No 
08/770,824, filed December 20, 1996 and entitled -VIRTDAl' 
CERTIFICATE AUTHORITY, which is incorporated herein by 
reference. Such a system can be adapted to include the use of 
biometric certificates as described herein for 
cryptographically binding the biometric data of a user with 
identification information to form such biometric certificates 
The use of public key technology allows the 

transaction/signature authentication process to be done either 
centrally or remotely, depending upon the needs of the 
transaction. 

While the disclosed biometric certification system and 
method is particularly shown and described herein with 
reference to the preferred embodiments, it is to be understood 
that various modifications in form and detail may be made 
therein without departing from the scope and spirit of the 
present invention. Accordingly, modifications, such as any 
examples suggested herein, but not limited thereto, are to be 
considered within the scope of the present invention. 
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CLAIMS 

WHAT IS CLAIMED IS : 

1. A biometric certification system for certifying an 
electronic transaction from a user, the electronic transaction 

5 including transaction biometric data, transaction first data, 
and a digital signature generated therefrom, the biometric 
certification system comprising: 

a biometric certificate extractor, responsive to a 
biometric certificate corresponding to user identification (ID) 
10 data included in the transaction first data, for extracting 
registration biometric data and a user public key therefrom; 

a decryptor, responsive to the registration biometric 
data and to the user public key, for retrieving a first hash 
value from the digital signature; 
15 a hash function, responsive to the transaction 

biometric data and the transaction first data, for generating a 
second hash value therefrom; and 

a first classifier for comparing the first hash value 
to the second hash value, and for generating a first validation 
20 signal to authenticate the transmission of the transaction 
first data and the transaction biometric data. 

2. The biometric certification system of claim 1, 
wherein the biometric certificate is in the form of a sequence, 

25 including: 

the registration biometric data; 
user input data; 
the public key of the user; and 
the digital signature. 

30 

3. The biometric certification system of claim 2, 
wherein the portion of the bit sequence including the first 
biometric data is greater than about 500 bytes in length. 

35 4 - The biometric certification system of claim 1, 
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wherein the first classifier includes a processor for 
performing data matching procedures. 

i 

5. The biometric certification system of claim 1, 
5 further comprising: 

a second classifier for comparing the registration 
biometric data and the transaction biometric data, and for 
generating a second validation signal to authenticate the user. 

10 6. The biometric certification system of claim l 

wherein the second classifier is a neural network trained from 
a set of biometric data stored in the biometric database. 

7. A biometric certification system for authenticating 
15 an electronic transaction involving a user, the electronic 

transaction including transaction biometric data, transaction 
fxrst data, and a digital signature generated therefrom 
comprising: 

a transmitting section including: 
20 a transac tion biometric input device responsive 

to a set of physical characteristics of the user, the 
transaction biometric input device generates corresponding 
the n user i0n dM related to the physical condition of 

, 3 firSt hash funct ion generator, responsive to 

transaction first data and the transaction biometric data, for 
generating a first hash value signal therefrom; 
' • .„ . . 3 di9ital signature generator which generates a 

digital signature from the hash value and a private key signal 
0 of the user; and y 

a receiving section operatively connected to the 
L™:" SeCti ° n thrOU9h 3 ~' "~ — - action 

5 a bio m ^ • a . biometric certificate extractor, responsive to 

a biometric certificate corresponding to user identification 
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(ID) data included in the transaction first data, for 
extracting registration biometric data and a user public key 
therefrom; 

a decryptor, responsive to the registration 
biometric data and to the user public key, for retrieving the 
first hash value from the digital signature; 

a second hash function generator, responsive to 
the transaction biometric data and the transaction first data, 
for generating a second hash value therefrom; and 

a first classifier for comparing the first hash 
value to the second hash value, and for generating a first 
validation signal to authenticate the transmission of the 
transaction first data and the transaction biometric data. 

8. The biometric certification system of claim 7, 
wherein the transaction biometric input device is a visual 
reader which obtains hand geometry images of the user to 
generate corresponding biometric data. 

9. The biometric certification system of claim 7, 
wherein the transaction biometric input device is a visual 
reader which obtains iris images of the user to generate, 
corresponding biometric data. 

10. The biometric certification system of claim 7, 
wherein the transaction biometric input device is a visual 
reader which obtains retinal images of the user to generate 
corresponding biometric data. 

11. The biometric certification system of claim 7, 
wherein the transaction biometric input device is a visual 
reader which obtains facial images of the user to generate 
corresponding biometric data. 

12. The biometric certification system of claim 7, 
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wherein the transaction biometrie i„ put device u , y ._ 
reader whrch obtains body images of the user to generate 
corresponding biometric data. generate 

wherein'thl^ "^"^ «"i£ication system of claim 7. 
wherern the transaction biometric input device includes- 

a sound transducer that receives speech from the 



user; and 



a speech digitizer which digitizes tlw> 
1. speech to generate corresponding biometric data 

14. The biometric certification system of claim 7 
wherexn the second classifier is a neural network t Z\ . 
^ a set of biometric data stored in the ^Tl^ZT. ^ 

furth^ co™^ of claim ,. 

a logic circuit for generating a final valirWi 
^ signal from the first and second validation a ^ 

involving a ^""^ « transaction 

3 a rxrst user, comprasing the steps of- 

registering a user, including the steps of- 
„ . receiving a registration set of physical 

25 characteristics of the user at- =, k- . - . pny81cal 

* tne user at a biometric input device- 

CorrM At 9 enerati «9 registration biometric data ' 
corresponding to the registration set of physical 
characteristics; 

transmit" 9 WOTCtrlC -*"»«*• *» a memory; 

network ' ran °" lt,:in9 « electronic transaction over a 

35 Mcltl dat T r ° niC ""^ ™^ transaction 

lometrrc data, transaction first data, and a digital signature 
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generated therefrom, the step of transmitting including the 
steps of: 

, receiving a current set of physical 

characteristics of the user; 
5 generating the transaction biometric data from 

the current set related to the physical condition of the user; 

generating a first hash value signal from the 
transaction first data and the transaction biometric data; 

generating the digital signature from the hash 
10 value and a private key signal of the user; and 

transmitting the digital signature over the 

network; and 

transmitting the transaction biometric data and 
the transaction first data over the network; and 
15 authenticating the electronic transaction, including 

the steps of : 

receiving the digital signature, the transaction 
biometric data and the transaction first data from the network; 

retrieving user identification (ID) data from 
20 the transaction first data; 

retrieving a biometric certificate corresponding 
to user ID data from a memory; 

extracting registration biometric data and the 
user public key from the biometric certificate; 
25 decrypting the digital signature using the user 

public key to retrieve the first hash value from the digital 
signature; 

generating a second hash value from the 
transaction biometric data and the transaction first data; 
30 comparing the first hash value to the second 

hash value using a first classier; 

generating a first validation signal to 
authenticate the transmission of the transaction first data and 
the transaction biometric data; 
35 comparing the registration biometric data and 
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the transaction biometric data using second classifier; and 

generating a second validation signal to 
authenticate the user. 

5 17. The method of claim 16, wherein the step of 

authenticating further comprises the steps of: 

ANDing the first and second validation signals. 

18. The method of claim 15, wherein the step of receivina 
^set of pnysical characteristics of the use, includes the It^ 

receiving visual characteristics of the user using a 
vxsual reader as the registration biometric input device. 

15 19 The method of claim 15, wherein the step of receiving 

: f : et ° f Phy8iCal <*— istics of the user includes the Lep 

receiving speech characteristics of the user usino a 
speech digitizer as the registration biometric input device 

20. The method of claim 15, wherein the step of 
generating the registration biometric data includes the step of 
generatang a bit sequence greater than about 500 bytes in 
length as the registration biometric data. 
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